preseto/block-context

Repo bus factorcaution

All 56 recent commits came from one contributor, creating a meaningful continuity risk; organization backing partly compensates because maintenance can be handed off.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest project-hygiene gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.

Version stabilitycaution

Version 0.2.0 is not a stable major release, but it is not marked prerelease and has a limited recent prerelease share, so this is only a modest maturity concern.

Workflow auditcaution

The sole workflow was fully analyzed and scopes permissions at job level, but all 7 action references are unpinned and the audit found high-confidence template-injection patterns. No untrusted checkout or script-injection trigger was reported, so this is workflow hygiene risk rather than a severe standalone health failure.